Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
File:                     0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft (raw, json)
Hash identifier:          Vxaldl2VTRQsdcoTVjy4zcFTJo4S+bxiIpE6ZsCxrOI=
Subject key identifier:   EF:8E:74:E3:BB:44:5C:01:8C:9A:A4:26:FD:53:E4:DF:31:CB:DA:3D
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Certificate issuer:       /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial:       01A0D1FFF66D3BA446AB39C17FF31229FB65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
Manifest number:          0E44
Signing time:             Thu 24 Sep 2026 06:00:07 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:07 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:07 +0000
Files and hashes:         1: 0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl (hash: VrFqVYdE4Q1JhjOCAl0Ni2CAUSisOAr9Y1XzHa/+hWo=)
                          2: sd3Ti-PexTeIfKSIlFVsahi831g.roa (hash: bnhb+UkUn0OUvRl5Jv3gihCvYD+cOKAgFSe/iwbzctY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:ff:f6:6d:3b:a4:46:ab:39:c1:7f:f3:12:29:fb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
        Validity
            Not Before: Sep 24 06:00:07 2026 GMT
            Not After : Sep 25 06:00:07 2026 GMT
        Subject: CN=ef8e74e3bb445c018c9aa426fd53e4df31cbda3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:be:8e:8c:ae:74:88:21:44:b5:35:d0:f5:
                    09:f8:43:36:fd:d4:3a:db:37:f4:05:37:e8:05:3b:
                    34:d3:8d:e4:bf:0b:66:8a:76:dc:59:55:ae:5c:70:
                    3c:b1:0c:4e:32:a8:2f:ad:4a:96:79:ab:5d:20:42:
                    20:2e:af:f4:d4:28:84:44:d7:84:4d:99:c7:83:11:
                    ad:48:53:fc:10:7d:79:89:e8:0f:0d:79:13:69:e0:
                    2b:6b:a2:94:35:09:ef:b3:d3:41:fe:ab:00:90:61:
                    06:03:78:df:0b:39:49:d1:34:1d:6f:31:97:89:e1:
                    8e:59:1b:02:65:54:02:78:01:87:91:b4:77:9d:ea:
                    35:cb:51:40:85:de:fc:d5:a7:eb:05:a8:34:c1:db:
                    ce:53:4c:9d:6b:53:75:70:de:94:dd:18:fa:c5:fc:
                    f9:33:5a:3a:c3:70:89:36:0c:2b:c5:19:be:d8:2e:
                    6d:d6:07:31:65:27:4a:b9:43:4d:b7:b8:5e:e8:05:
                    40:32:fa:41:6f:e8:6d:d6:e1:58:9d:20:b1:9f:8f:
                    99:83:c5:84:ef:bb:8c:dd:f9:82:86:49:77:64:99:
                    96:7a:7e:80:2b:3b:52:f6:33:dc:29:65:ba:52:c3:
                    c6:3a:43:2b:73:d6:32:0a:43:60:9c:cb:5a:3c:1e:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8E:74:E3:BB:44:5C:01:8C:9A:A4:26:FD:53:E4:DF:31:CB:DA:3D
            X509v3 Authority Key Identifier:
                keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3e:50:a8:83:10:1f:92:68:f2:39:52:3e:6c:05:3a:01:d1:
         02:98:33:fb:a8:b0:0c:a4:7b:be:36:29:a1:d1:2a:5c:eb:42:
         ff:c8:f8:4c:a8:2e:52:20:f1:68:4f:8e:b2:62:56:8b:76:0a:
         cd:42:23:cf:9b:57:89:4b:5b:ee:eb:6e:69:5e:28:12:cb:60:
         7e:b8:ba:da:7c:a3:46:c0:29:bf:ed:23:d6:16:1f:4c:b2:65:
         b7:f7:c4:58:6d:95:70:45:7b:54:33:53:4d:2a:a7:9d:90:26:
         d5:71:56:a4:47:08:3f:37:4c:51:f2:bc:ba:3a:d9:04:33:10:
         63:ef:7e:cf:ae:9c:22:d2:cd:cb:95:9d:89:51:df:64:e6:2e:
         95:9e:50:be:23:ac:65:47:41:31:94:30:bd:f7:01:c3:a9:f0:
         b7:5d:0d:25:b8:a2:11:44:f5:a0:1b:fe:ad:b5:60:76:c9:5b:
         d8:c9:e3:c5:b3:b9:75:40:45:86:39:e0:dd:2d:ca:a3:77:e2:
         e9:3b:15:9c:79:be:0d:65:3f:15:72:c8:c0:09:89:a6:5f:d9:
         73:e2:51:34:f2:16:8f:a9:4e:1f:96:53:4f:eb:d9:9f:ce:cd:
         2a:8f:aa:d5:e9:a2:0c:3f:a6:fa:28:95:53:20:d0:e0:c2:06:
         de:0d:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:49 2026 by rpki-client